Acumenis is an Australian cybersecurity and privacy consultancy working with organisations that take security seriously and want partners who do the same. We help clients identify where they're exposed, lift their defences, and demonstrate to customers, regulators, and boards that their security and privacy posture stands up to scrutiny. The firm is ISO/IEC 27001 certified and CREST accredited for penetration testing. These are credentials we hold not as marketing, but because they reflect the way we operate.

Our work spans four practice areas.

Penetration testing:
CREST-accredited testing across web and mobile applications, APIs, cloud environments (AWS, Azure, Google Cloud), internal and external networks, and wireless infrastructure. Our engagements follow OWASP, PTES, and NIST methodologies, and our reports are written to be acted on. Findings are contextualised against business impact, ranked by what genuinely matters, and explained in language that resonates with both engineers and executives.

Information security programs:
Hands-on support for ISO/IEC 27001 certification journeys, from scoping and gap analysis through implementation, internal audit, and external certification. We also assess and uplift Essential Eight maturity in line with ACSC guidance, producing roadmaps that account for real-world constraints rather than ideal-world assumptions.

Cyber incident readiness:
Custom-built tabletop exercises that walk executives and technical teams through scenarios they're most likely to face, including ransomware, supply-chain incidents, insider threats, and breach notification under the Australian Privacy Act. The goal is decisions rehearsed, gaps surfaced, and confidence built before the pressure is real.

Privacy and AI governance:
Implementation and certification support for ISO/IEC 27701 (privacy information management) and ISO/IEC 42001 (AI management systems), alongside Australian Privacy Principles compliance, privacy impact assessments, and responsible AI governance frameworks for organisations adopting machine learning and generative AI.

Our approach:
Acumenis is intentionally a senior-led consultancy. The people who scope your engagement are the ones who do the work. We've structured the firm to keep that promise, staying focused rather than scaling for the sake of it, and investing in our consultants so they can engage with each client's context, not just their checklist. Our clients include technology companies navigating their first enterprise customer security review, established organisations maturing existing programs, and leadership teams seeking trusted counsel during incidents or transformations. Across all of them, the consistent feedback we hear is that our work is rigorous, clear, and built to last beyond the engagement itself.

Cyber Security

Acumenis

Brisbane Office

Toowoomba Office

Andy Dowling

Ian Esplin

JP Haywood

Acumenis' Advisory Team provide clients with strategic information security advise, assisting with implementations and audits against various security frameworks including ISO 27001, 27701, 42001, Essential Eight, and PCI DSS.

Advisory Team

Members of this team perform penetration testing and other offensive security assessments, testing and validating the security of our clients. These projects cover networks, web apps, mobile apps, and more.

Acumenis

Org chart

Teams

Advisory Team

Assurance Team

Offices

Acumenis

Org chart

Teams

Advisory Team

Assurance Team

Offices

Related companies